Commit 45b7fe40 authored by Marcia Ramos's avatar Marcia Ramos

Merge branch 'plantuml-security-notice' into 'master'

Add security section to PlantUML documentation

Closes #18085

See merge request gitlab-org/gitlab!33061
parents 35a686bf cf879ebb
......@@ -105,6 +105,21 @@ To activate the changes, run the following command:
sudo gitlab-ctl reconfigure
```
### Security
PlantUML has features that allows fetching network resources.
```plaintext
@startuml
start
' ...
!include http://localhost/
stop;
@enduml
```
**If you self-host the PlantUML server, network controls should be put in place to isolate it.**
## GitLab
You need to enable PlantUML integration from Settings under Admin Area. To do
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment